P2015-ND-10

On May 8, 2013, the Organization discovered that applications submitted by individuals to become dealers for the Organization were accessible over the internet. This occurred because the settings in effect did not require login credentials to access applications made. Each application made was therefore accessible over the internet from the date it was submitted by the individual, until May 8, 2013 when the Organization discovered the issue and disabled the entire dealer application site.